Buy Crypto
Pay with
USD
USD
Buy & Sell
Hot
Supports Visa, Mastercard, SEPA & more
P2P
0 Fees
Flexible trading, zero fees
Gate Card
Use your crypto for payments worldwide
Markets
Trade
Basic
Advanced
Futures
Futures
Access hundreds of perpetual contracts
CFD
Gold
One platform for global traditional assets
Options
Hot
Trade European-style vanilla options
Unified Account
Maximize your capital efficiency
Demo Trading
Introduction to Futures Trading
Learn the basics of futures trading
Futures Events
Join events to earn rewards
Demo Trading
Use virtual funds to practice risk-free trading
U.S. Stocks
CFD
U.S. stock CFD derivatives
Futures
High leverage, 24/7 trading
Tokenized Stocks
Backed by real stock assets
GUSD
Mint GUSD for Treasury RWA yields
Earn
Launch
CandyDrop
tag
Collect candies to earn airdrops
Launchpool
Quick staking, earn potential new tokens
HODLer Airdrop
Hold GT and get massive airdrops for free
Pre-IPOs
Unlock full access to global stock IPOs
Alpha Points
Trade on-chain assets and earn airdrops
Futures Points
Earn futures points and claim airdrop rewards
Investment
Square
Square
Post, share, and explore crypto trends
Live
moments live
Live crypto market analysis
Chat
Chat with crypto traders
News
What is happening in crypto
flower_head
More
Promotions
AI
Others
TradFi
Rewards
Square
Latest
Hot
News
Profile

Aikido: Over 30 npm packages targeted in IronWorm supply chain attack, stealing cloud service and AI keys

WuSaidBlockchainW
robot
Abstract generation in progress
According to Aikido Security, the new "IronWorm" supply chain attack has affected over 30 npm packages from asteroiddao, with malicious Rust binaries executed during the pre-installation phase. The attack program can scan 86 environment variables and 20 types of credential files, targeting AWS, GCP, Vault, npm, as well as AI keys from Anthropic, OpenAI, and others, and attempting to attack Exodus Wallet. The malware also uses an eBPF rootkit to conceal itself, reconnects via Tor, and propagates using the npm Trusted Publishing OIDC mechanism, while forging commits from claude, dependabot, renovate, and others to cover up traces of the attack.
View Original
This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.
  • Reward
  • 7
  • Repost
  • Share
Comment
Add a comment
Add a comment
TransparentDome
· 1h ago
Daring to touch Vault keys, enterprise-level secret management has become a mere formality.
View OriginalReply0
StakingDaydreamer
· 3h ago
eBPF rootkit + Tor back connection, this attack chain is more familiar to me than I am
View OriginalReply0
OnchainComplainer
· 3h ago
Can Trusted Publishing OIDC be forged? npm's trust mechanism has become a joke
View OriginalReply0
L2ArbitrageYoungster
· 3h ago
More than 30 packages mass-injected with malicious code, the name asteroiddao just sounds suspicious.
View OriginalReply0
GateUser-de2a15eb
· 3h ago
The npm supply chain has exploded again, and the pre-installation of Rust binaries is a sneaky move.
View OriginalReply0
MempoolSparrow
· 3h ago
Exodus wallet has also been targeted; crypto hoarders should quickly check their local environment.
View OriginalReply0
IceCreamUnderTheNeonLights
· 3h ago
Scan all 86 environment variables, my AWS keys are already trembling.
View OriginalReply0

  • Pinned

Sitemap